[rrss]

I dearly wish overcommit could be disabled per-cgroup, but AFAIK this is not possible.

malloc failing seems like a much simpler indication of memory pressure than the alternatives like PSI.

[zozbot234]

AIUI, you can always use plain old ulimit to restrict virtual memory usage per-process, which has the same outcome as disabling overcommit.

[rrss]

yeah, for a single process. but I’m mostly interested in doing this for a process tree (like a browser), and I don’t think this would work well in that case, since the limit would apply to each process individually.

this would work if there was a cgroup virtual address space controller, but I think those have been proposed but never merged.